v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/r103_tier2_action_test.go

@@ -131,7 +131,7 @@ func TestR103_ConfirmStatesTheOverwrite(t *testing.T) {
 // the screen. R-101 governs the wording when the date is an ATTEMPT rather than a proven copy.
 func TestR103_ConfirmNamesTheCopyDate(t *testing.T) {
 	const stamp = "2026-08-25T03:30:00Z"
-	rendered := fmtRFC3339Local(stamp)
+	rendered := fmtRFC3339Local("hu", stamp)
 	if rendered == stamp {
 		t.Fatal("the stamp did not render as a local date — the assertion below would be vacuous")
 	}
@@ -355,7 +355,7 @@ func TestR103_HandlerPublishesTheOutcome(t *testing.T) {
 	if want := wantOutcome + " " + wantSource; st.Last.Message != want {
 		t.Errorf("published message =\n  %q\nwant\n  %q", st.Last.Message, want)
 	}
-	if !strings.Contains(st.Last.Message, fmtRFC3339Local(r103CopyStamp)) {
+	if !strings.Contains(st.Last.Message, fmtRFC3339Local("hu", r103CopyStamp)) {
 		t.Error("the outcome does not name the date of the copy it restored from")
 	}
 }